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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MO NTH (S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)S Responsive to communication(s) filed on 20 January 2006 . 
2a)D This action is FINAL 2b)(3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-4 and 6-9 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) Q Claim(s) is/are allowed. 

6) S Claim(s) 1-4. 6-9 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-1 52. 

Priority under 35 U.S.C. § 1 1 9 

1 2)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



Continued Examination Under 37 CFR 1.114 



1. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. 



2. Applicant's submission filed on March 22, 2005 has been entered and made of 
record. 



Double Patenting 



The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 
644 (CCPA 1969). 
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A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply 
with 37 CFR 3.73(b). 

3. Claims 1 - 4 and 6 - 9 are rejected on the ground of nonstatutory obviousness- 
type double patenting as being unpatentable over claims 1 - 22 of U.S. Patent No. 
6,834,333. Although the conflicting claims are not identical, they are not patentably 
distinct from each other because the instant case, all elements of claims 1 - 4 and 6-9 
correspond to the claims of 1 - 22 of the patent claims, except in the instant claims 1 , 6, 
7, 8 and 9, cryptosystem means receives, as cryptosystem keys for performing 
cryptosystem processing on data to be stored in said storage area and when the mutual 
authentication is established, transmitting, to said data storage device, by said data 
recording device, a set of session-key-used CBC-mode processing keys which are 
generated by executing, based on a session key generated in the mutual authentication, 
is referred in the patent claims 1 , 4, 6, 1 1 , 13, as an integrity check value which is 
generated based on data including data in the access permission table and an identifier 
unique to said data storage means is included as a check value for verifying whether or 
not the data in the access permission table is interpolated. It would have been obvious 
to one having ordinary skill in the art to recognize that providing the cryptosystem keys 
for performing cryptosystem processing on data and generating a session key based on 
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mutual authentication is equivalent to generating an integrity check value based on data 
including data in access permission table and verifying whether or not the data in the 
access permission table is interpolated. 



Response to Arguments 

4. Applicant's arguments filed on January 20, 2006, have been fully considered but 
they are not persuasive for the following reasons: 

Bellare discloses a method to encrypt a plaintext using a first key and second 
secret keys by cipher block chaining the plaintext using the first key and a fixed 
initialization vector to generate a CBC message authentication code. 

Regarding claim 1, Applicant argues that the prior art (Bellare) do not teach "a 
second set of keys correlated with integrity-check-value generating keys of data to be 
stored in at least one of the sectors" and "executing encryption processing on the first 
and second set of keys in a cipher block chaining (CBC) mode using a storage key 
stored in said data storage device". These arguments are not found persuasive. Bellare 
discloses "a second set of keys correlated with integrity-check-value generating keys of 
data to be stored in at least one of the sectors" and "executing encryption processing on 
the first and second set of keys in a cipher block chaining (CBC) mode using a storage 
key stored in said data storage device", see Column 5 line 5 - Column 6 line 35, 
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wherein a pair of secret keys (i.e., first key and a second key) for cipher block chaining 
(CBC) machine authentication code (MAC) and to generate integrity-check-value and 
the CBC-MAC. 

Regarding claims 6-9, Applicant argues that the prior art (Bellare) do not teach 
"a second set of keys correlated with integrity-check-value generating keys of data to be 
stored in at least one of the sectors" and "encryption processing is executed on the first 
and second set of keys in a cipher block chaining (CBC) mode using a storage key 
stored in said data storage device". These arguments are not found persuasive. Bellare 
discloses "a second set of keys correlated with integrity-check-value generating keys of 
data to be stored in at least one of the sectors" and "encryption processing is executed 
on the first and second set of keys in a cipher block chaining (CBC) mode using a 
storage key stored in said data storage device", ", see Column 5 line 5 - Column 6 line 
35, wherein a pair of secret keys (i.e., first key and a second key) for cipher block 
chaining (CBC) machine authentication code (MAC) and to generate integrity-check- 
value and the CBC-MAC with the second secret key wherein the it is implemented on a 
program storage device that is readable by the processor to perform the various 
process. 

Therefore, the examiner respectfully asserts that the cited prior art does teach or 
suggest the amended subject matter "a second set of keys correlated with integrity- 
check-value generating keys of data to be stored in at least one of the sectors" and 
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"encryption processing is executed on the first and second set of keys in a cipher block 
chaining (CBC) mode using a storage key stored in said data storage device" is broadly 
recited in the amended independent claims 1 and 6-9 and the new independent claim 
40. The dependent claims 2 - 4 are rejected at least by virtue of their dependency on 
the dependent claims and by other reason set forth in this office action. Accordingly, the 
rejection for the pending claims 1 - 4 and 6 - 9 is respectfully maintained. 



Claim Rejections - 35 USC § 102 

The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

5. Claims 1 - 4 and 6 - 9 are rejected under 35 U.S.C. 102(b) as being clearly 
anticipated by Bellare et al. (U.S. Patent Number 5,673,319). 

6. Regarding Claim 1 , Bellare teaches and describes a data storage area consisting 
of a plurality of blocks, each of which consists of a plurality of sectors which each have 
a predetermined data capacity (Summary and Column 5 lines 5 - 21 ); and 

cryptosystem means (Summary and Column 5 lines 5-21); 
wherein said cryptosystem means receives, as cryptosystem keys for performing 
cryptosystem processing on data to be stored in said data storage area a first set of 
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keys correlated with the encryption keys or decryption keys for each of the sectors from 
a device capable of performing data communication with said data storage device and a 
second set of keys correlated with integrity-check-value generating keys of data to be 
stored in at least one of the sectors; and transmits the encrypted key to said data 
storage device (Summary; Column 4 lines 13-65 and Column 5 line 5 - Column 6 line 
35). 



7. Regarding Claim 6 t Bellare teaches and describes executing mutual 
authentication processing between said data storage device and said data recording 
device (Summary and Column 5 lines 5 - 21 ); 

when the mutual authentication is established, transmitting, to said data storage 
device, by said data recording device, a set of session-key-used CBC-mode-processing 
keys which are generated by executing, based on a session key generated in the 
mutual authentication, encryption processing in the CBC mode on a first set of keys 
applicable to encryption processing on pieces of data to be stored in the sectors and a 
second set of keys correlating to integrity-check-value generating keys of data to be 
stored in at least one of the sectors, the encryption processing being executed on said 
first and second set of keys in the CBC using a storage key stored in said data storage 
device (Summary; Column 4 lines 1 3 - 65 and Column 5 lines 5 - 21 ); 

decrypting, by said data storage device, said set of session-key-used CBC- 
mode-processing keys by performing decryption in the CBC mode using the session 
key (Summary and Column 5 lines 22 - 34); 
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transmitting, to said data storage device, a set of decrypting, by storage-key- 
used generated by executing based on a storage key unique to said data storage 
device, encryption processing in the CBC mode on the set of decrypted session-key- 
used CBC-mode-processing keys (Summary and Column 5 line 5 - Column 6 line 35); 
and 

generating, by said data recording device, header information including as a 
component the received set of storage-key-used CBC-mode-processing keys which are 
generating, by said data recording device, header information including as a component 
the received set of storage-key-used CBC-mode-processing keys, the header 
information corresponding to the data to be stored in said data storage device 
(Summary; Column 4 lines 13-65 and Column 5 line 5 - Column 6 line 35). 

8. Regarding Claim 7, Bellare teaches and describes executing mutual 
authentication processing between said data storage device and said data playback 
device (Summary and Column 5 lines 5-21); 

when the mutual authentication is established, transmitting, from said data 
playback device to said data storage device, a set of storage-key-used CBC-mode- 
processing keys which is included in the header information of data stored in said data 
storage area and which is generated by executing encryption processing in the CBC 
mode using a storage key unique to said data storage device and on an integrity-check- 
value generating key of data to be stored in at least one of the sectors (Summary; 
Column 4 lines 1 3 - 65 and Column 5 lines 5 - 21 ); 



Application/Control Number: 09/982,624 Page 9 

Art Unit: 2136 

decrypting, by said data storage device, the set of storage-key-used CBC-mode- 
processing keys by performing decryption in the CBC mode using the storage key 
(Summary and Column 5 lines 5 - 34); 

transmitting, by said data storage device, to said data playback device, a set of 
session-key-used CBC-mode-processing keys which are generated by executing, 
based on a session key generated in the mutual authentication encryption processing in 
the CBC mode on the set of decrypted storage-key-used CBC-mode-processing keys 
(Summary and Column 5 line 5 - Column 6 line 35); and 

obtaining, by said data playback device, a set of keys for decrypting encrypted 
sector data which is stored in each of the sectors in said data storage area by 
decrypting, in the CBC mode, the session-key-used CBC-mode-processing keys by 
using the session key (Summary and Column 5 line 5 - Column 6 line 35). 

9. Regarding Claim 8, Bellare teaches and describes executing mutual 
authentication processing between said data storage device and said data recording 
device (Summary and Column 5 lines 5 - 21 ); 

when the mutual authentication is established, transmitting, to said data storage 
device, by said data recording device, a set of session-key-used CBC-mode-processing 
keys which are generated by executing, based on a session key generated in the 
mutual authentication, encryption processing in the CBC mode on a first set of keys 
applicable to encryption processing on pieces of data to be stored in the sectors and a 
second set of keys correlated with integrity-check-value generating keys of data to be 
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stored in at least one of the sectors, the encryption processing being executed using a 
storage key stored in said data storage device (Summary; Column 4 lines 13-65 and 
Column 5 lines 5-21); 

decrypting, by said data storage device, said set of session-key-used CBC- 
mode-processing keys by performing decryption in the CBC mode using the session 
key (Summary and Column 5 lines 22 - 34); 

transmitting to said data storage device, a set of storage-key-used CBC-mode- 
processing keys which are generated by executing, based on a storage key unique to 
said data storage device, encryption processing in the CBC mode on the set of 
decrypted session-key-used CBC-mode-processing keys (Summary and Column 5 line 
5 - Column 6 line 35); and 

generating, by said data recording device, header information including as a 
component the received set of storage-key-used CBC-mode-processing keys which are 
generating, by said data recording device, header information including as a component 
the received set of storage-key-used CBC-mode-processing keys, the header 
information corresponding to the data to be stored in said data storage device 
(Summary; Column 4 lines 13-65 and Column 5 line 5 - Column 6 line 35). 

10. Regarding Claim 9, Bellare teaches and describes executing mutual 
authentication processing between said data storage device and said data playback 
device (Summary and Column 5 lines 5 - 21 ); 
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when the mutual authentication is established, transmitting, from said data 
playback device to said data storage device, a set of storage-key-used CBC-mode- 
processing keys which is included in the header information of data stored in said 
generated by executing data storage area and which is encryption processing in the 
CBC mode using a storage key unique to said data storage in at least one of the sectors 
(Summary; Column 4 lines 1 3 - 65 and Column 5 lines 5 - 21 ); 

decrypting, by said data storage device, the set of storage-key-used CBC-mode- 
processing keys by performing decryption in the CBC mode using the storage key 
(Summary and Column 5 lines 22 - 34); 

transmitting, by said data storage device, to said data playback device, a set of 
session-key-used CBC-mode-processing keys which are generated by executing, 
based on a session key generated in the mutual authentication, encryption processing 
in the CBC mode on the set of decrypted storage-key-used CBC-mode-processing keys 
(Summary and Column 5 line 5 - Column 6 line 35); and 

obtaining, by said data playback device, a set of keys for decrypting encrypted 
sector data which is stored in each of the sectors in said data storage area by 
decrypting, in the CBC mode, the session-key-used CBC-mode-processing keys by 
using the session key (Summary and Column 5 line 5 - Column 6 line 35). 

11. Claim 2 is rejected applied as above in rejecting Claim 1. Furthermore, Bellare 
teaches and describes wherein said cryptosystem means, generates key data as the 
header information of the data to be stored in said data storage area by using a storage 
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key which is unique to said data storage device to execute the encryption processing in 
the CBC mode on the received set of keys (Summary and Column 5 line 5 - Column 6 
line 35). 

12. Claim 3 is rejected applied as above in rejecting Claim 1. Furthermore, Bellare 
teaches and describes said data storage with said device capable of performing data 
communication with said data storage device (Summary and Column 5 lines 5 - 21 ); 

the received set of keys is a set device performs mutual authentication of 
session-key-used CBC-mode-processing keys a session key generated in the mutual 
authentication (Summary and Column 5 lines 5 - 21 ); 

said cryptosystem means performs the decryption in the CBC mode of said set of 
encrypted session-key-used CBC-mode-encrypted in the CBC mode by using 
processing keys (Summary and Column 5 lines 22 - 34); and 

in said cryptosystem means CBC-mode-processing keys is generated by 
executing, based on a storage key unique to said data storage device, the encryption 
processing in the CBC mode on the set of decrypted session-key-used CBC-mode- 
processing keys, and said set of storage-key-used CBC-mode-processing keys is a set 
of storage-key-used transmitted as header-information-forming data to said device 
(Summary and Column 5 line 5 - Column 6 line 35). 
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13. Claim 4 is rejected applied as above in rejecting Claim 1. Furthermore, Bellare 
teaches and describes said data storage device performs mutual authentication with 
said device capable of performing data communication with said data storage device; 

the received set of keys is header information on the data to be stored in said 
data storage area, and is a set of storage-key-used CBC-mode-processing keys 
encrypted in the CBC mode based on a storage key unique to said data storage device 
(Summary and Column 5 lines 5 - 21 ); 

said cryptosystem means performs the decryption in the CBC mode of the set of 
encrypted storage-key-used CBC-mode-processing keys by using said storage key 
(Summary and Column 5 lines 22 - 34); and 

in said cryptosystem means, a set of session-key-used CBC-mode-processing 
keys is generated by executing, based on a session key generated in the mutual 
authentication, the encryption processing in the CBC mode, and said set of session- 
key-used CBC-mode-processing keys is transmitted as data constituting decrypting key 
information (Summary and Column 5 line 5 - Column 6 line 35). 

Conclusion 

14. Examiner's Note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims above for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
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may apply as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 

15. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 

Applicant is urged to consider the references. However, the references should be 
evaluated by what they suggest to one versed in the art, rather than by their specific 
disclosure. If applicants are aware of any better prior art than those are cited, they are 
required to bring the prior art to the attention of the examiner. 

16. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 571- 
272-3866. The examiner can normally be reached on 8:00a.m. To 5:00p.m.. If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Ayaz 
Sheikh can be reached on 571-232-3795. Any inquiry of a general nature or relating to 
the status of this application or proceeding should be directed to the receptionist whose 
telephone number is 703-305-3900. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR only. For more 
information about the PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). 

Pramila Parthasarathy 

February 14, 2006. A>4<4uA 



/AYAZ SHEIKH 
SUPERVISORY PATENT EXAMINER 

TECHNOLOGY CENTER 2100 




